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PATENT 



IN THE UNITED STATES PATENT AND TRADEMARK OFFICE 



Assistant Commissioner for Patents 
Washington, D.C. 20231 

SIR: 

Prior to examination, please amend the above-identified application as 
follows: 

IN THE SPECIFICATION : 

After the title and before the first paragraph, please insert -THIS 
APPLICATION IS A U.S. NATIONAL PHASE APPLICATION OF PCT 
INTERNATIONAL APPLICATION PCT/JP00/0O956-. 



Applicant: H. Takechi et al. 
Serial No.: To Be Assigned 
Filed: Herewith 

FOR: COMPUTER AND PROGRAM RECORDING 



Art Unit: 
Examiner: 



MEDIUM 



PRELIMINARY AMENDMENT 



On page 6, line 15, please delete 



'the 1 st invention" and insert 



—one aspect—. 



On page 6, line 16, please delete 



'(corresponding to claim 1)". 



On page 7, line 2, please delete "The 2 nd invention" and insert 



■Another aspect--. 



On page 7, line 3, please delete "(corresponding to claim 2)". 
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On page 7, lines 3-4, please delete "according to said 1 st invention". 

On page 7, line 7, please delete "The 3 rd invention" and insert 
—Still another aspect--. 

On page 7, line 8, please delete "(corresponding to claim 3)". 

On page 7, lines 8-9, please delete "according to said 1 st invention". 

On page 7, line 12, please delete "The 4 th invention" and insert 
-Yet another aspect--. 

On page 7, line 13, please delete "(corresponding to claim 4)". 

On page 7, lines 13-14, please delete "according to any one of said 
1 st to 3 rd inventions". 

On page 7, line 19, please delete "The 5 th invention" and insert 
-Still yet another aspect--. 

On page 7, line 20, please delete "(corresponding to claim 5)". 

On page 7, lines 20-21, please delete "according to any one of said 
1 st to 4 th inventions". 

On page 8, line 6, please delete "The 6 th invention" and insert 
—Another aspect--. 

On page 8, line 7, please delete "(corresponding to claim 6)". 

On page 8, line 23, please delete "The 7 th invention" and insert 
—A still further aspect—. 

On page 8, line 24, please delete "(corresponding to claim 7)". 
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On page 9, line 7, please delete "The 8 th invention" and insert 
~A yet further aspect--. 

On page 9, line 8, please delete "(corresponding to claim 8)". 

On page 9, line 15, please delete "The 9 th invention" and insert 
—A still yet further aspect--. 

On page 9, line 16, please delete "(corresponding to claim 9)". 

On page 9, line 21, please delete "The 10 th invention" and insert 
—An additional aspect--. 

On page 9, line 22, please delete "(corresponding to claim 10)". 

On pages 9-10, lines 25-1, please delete "described in any one of 
said 1 st to 8 th inventions". 

IN THE CLAIMS : 

Please amend the claims as follows: 

In claim 2, line 1, please change "fourth" to -forth--. 

In claim 3, line 1, please change "fourth" to -forth--. 

In claim 4, line 1, please change "fourth" to -forth--. 

In claim 5, line 1, please change "fourth" to -forth--. 

In claim 5, line 1, please change "4" to ~3~. 

In claim 8, line 1, please change "fourth" to -forth-. 

In claim 9, line 4, please change "to 8" to -2, 3, 6, 7, or 8~. 
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In claim 10, line 5, please change "to 8" to --2, 3, 6, 7, or 8~. 
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SPECIFICATION 

/ 

_CO MPUTER AND PRO^ RAMRECORpiNG JMEDIUM 

TECHNICAL FIELD 

The present invention relates to a computer for 
recording and reproducing data, and also relates to a program 
recording medium. 

BACKGROUND ART 

Networks for transmitting audio and video information 
in digital form are being developed. To transmit audio or 
video information for viewing or listening, the data must 
be transmitted in real time. 

IEEE 1394 was proposed as a standard for networks 
realizing such realtime data transmission, and is widely used 
today. IEEE 1394 is mounted as an external interface in many 
digital video/audio apparatuses including home digital VCRs . 
In VCRs, the use of IEEE 1394 has made it possible to control 
the VCR from an external device and also to transmit data 
from an external device to the VCR for recording or 
reproduction . 

In PCs, on the other hand, with advances in multimedia 
technology and the advent of recording media such as 
large-capacity hard disks and magneto-optical disks, it has 
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become possible to process video and audio information as 
well. That is, PCs can now have the capability to function 
as a recording and reproduction apparatus or a monitor for 
video and audio information. Windows 98, the standard OS 
for PCs , for example, supports IEEE 1394, making it possible 
to transfer AV data between PCs and digital video /audio 
apparatuses such as VCRs. It is expected that the fusion 
between PCs and digital video/audio apparatuses will further 
advance in the future. 

For a PC to be able to handle video and audio information , 
application software for processing video and audio 
information must be installed on the PC . AV data transferred 
from a video/audio apparatus is input into the PC, and 
processed for display, recording, reproduction, etc. by the 
application software installed on the PC. For example, if 
the application software is one that has a recording function, 
the AV data transferred from the video/audio apparatus is 
input into the PC, and recorded on a recording medium such 
as a hard disk or a magneto -optical disk by the application 
software . Application software capable of processingAVdata 
thus provides a variety of capabilities and, by installing 
such application software, a variety of AV data processing 
functions such as recording, reproduction, display, and 
manipulation can be added to the PC. 

Some AV data claim copyright protection, for example, 



by prohibiting copying or by permitting copying only once . 
In digital video/audio apparatuses such as VCRs, such 
copyright claimed AV data is recorded or played back by 
respecting the claimed copyright protection status. For 
example, for AV data for which copying is prohibited, VCRs 
do not record the data. On the other hand, for AV data for 
which copying is permitted only once, VCRs are allowed to 
record the data. Whether copying of AV data is permitted 
or not is confirmed by exchanging authentication or usage 
approval information based on copyright between the VCR and 
the AV data transmitting apparatus such as an STB ( satellite 
broadcast receiver) . 

In today's PCs, however, if one wishes to respect the 
claimed copyright of copyright claimed AV data, since a 
variety of functions, such as recording, reproduction, and 
display, can be incorporated into a PC by utilizing the 
functions of the application software installed on the PC, 
there arises the problem that once the copyright claimed AV 
data is passed to the application software, one can freely 
process the AV data for recording, etc. by using the 
application software, defeating the purpose of the copyright 
protection. 

Even if a mechanism is devised to append a license for 
processing copyright claimed AV data to application software, 
the copyright may not be able to be protected if the application 
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software is illegally modified. In that case, if a tamper 
resistant system is built into the application software to 
prevent illegal modification of the application software, 
the copyright can be protected effectively. However, this 
method is not without problems; that is, once the tamper 
resistant system is broken by an illegal-minded user, 
substantial changes would have to be made not only to the 
organization of the PC but also to the structures of the OS, 
the application software, etc.. resulting in a large loss. 

Furthermore, if copyright claimed data is illegally 
handled using application software to which a license as 
described above is not granted, it is not possible to identify 
the source application software from the data that was 
illegally copied by the application software and distributed . 
That is , even if the presence of illegal application software 
is known, it is not possible to detect and disable the use 
of the illegal application software. That is, the problem 
is that it is not possible to identify and eliminate illegal 
software for copyright protection purposes. 

One characteristic of illegal usage by software is that 
the method of illegal usage can be distributed widely at low 
cost by just copying the software. This leads to the problem 
that even if the source of the illegal distribution can be 
identified, it is not effective to employ a method applied 
in the case of hardware that disables the use by illegal 
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apparatuses on an apparatus by apparatus basis . For example , 
when copies of an illegally altered application capable of 
escaping the check by a tamper resistant system are 
distributed, or when a method of escaping the check by a tamper 
resistant system is discovered and distributed , with the prior 
known method of disabling the use for each individual computer 
it is not possible to prevent such illegal act; besides, it 
could disable the use of legitimate applications. 

In view of the above situation, it is apparent that 
once an illegal distribution by a computer modified for the 
purpose of illegal distribution is discovered, since measures 
have to be taken to prohibit the use of AV data on computers 
or on the OS and to modify the computers or the OS itself, 
the damage is extensive and the cost involved is very high. 

As described above, the problem is that there are no 
effective ways to prevent illegal use once copyright claimed 
data is illegally distributed. 

DISCLOSURE OF THE INVENTION 

In view of the problems that application software can 
perform processing that infringes copyright on copyright 
claimed data, defeating the purpose of copyright protection, 
that it is practiced to defeat copyright protection by 
illegally modifying application software, that if illegal 
application software is produced, it is not possible to 
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identify and disable the illegal software to protect the 
copyright, that if copies of an illegally altered application 
capable of escaping the check by a tamper resistant system 
are distributed, with the prior known method it is not possible 
to prevent illegal use, and that when an illegal distribution 
by a computer modified for the purpose of illegal distribution 
is discovered, the cost of countermeasures is very high, it 
is an object of the present invention to provide a computer 
and a program recording medium that can protect the copyright 
for copyright claimed data and take countermeasures against 
illegal modifications of application software, and that, if 
illegal application is discovered, can identify and reject 
the application software and prevent an illegal distribution 
without involving extra cost. 

To solve the problems described above, the 1 st invention 
of the present invention (corresponding to claim 1) is 

a computer which comprises a system section and an 
application software section, and which takes in copyright 
claimed, encrypted data via a digital interface for processing 
therein, wherein 

said system section judges that said application 
software section is legitimate application software for the 
protection of copyright, and 

if said application software is a legitimate one, said 
system section passes a key for said encrypted data to said 
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application software section. 

The 2 nd invention of the present invention 
(corresponding to claim 2) is a computer according to said 
1 st invention, wherein said judgement in said system section 
is made by performing authentication between said system 
section and said application software section. 

The 3 rd invention of the present invention 
(corresponding to claim 3) is a computer according to said 
1 st invention, wherein said judgement in said system section 
is made by using a CRL (Certification Revocation List) listing 
illegitimate or legitimate application software. 

The 4 th invention of the present invention 
(corresponding to claim 4) is a computer according to any 
one of said 1 st to 3 rd inventions, wherein said system section 
obtains said encrypted key as the result of authentication 
with an external device, decrypts said encrypted data, and 
re-encrypts said decrypted data by using said key or another 
key. 

The 5 th invention of the present invention 
( corresponding to claim 5 ) is a computer according to any 
one of said 1 st to 4 th inventions , wherein said system section 
includes a tamper verification function, and a tamper code 
is embedded into said application software in said application 
software section, and wherein said system section reads said 
tamper code from said application software section and, using 
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said tamper verification function, verifies whether or not 
said application software has been tampered with, and if it 
is found that said application software has been tampered 
with, said system section reports the result of said 
verification . 

The 6 th invention of the present invention 
(corresponding to claim 6) is a computer which comprises a 
system section and an application software section, and which 
takes in copyright claimed, encrypted data via a digital 
interface for processing therein, wherein 

said system section includes a plurality of tamper 
verification functions, and a tamper code associated with 
a designated type of tamper verification function and type 
information indicating said type are embedded into said 
application software in said application software section, 
and wherein said system section reads said tamper code and 
its associated type information from said application 
software section and, using the tamper verification function 
corresponding to said type, verifies whether or not said 
application software has been tampered with, and if it is 
found that said application software has been tampered with, 
said system section reports the result of said verification. 

The 7 th invention of the present invention 
(corresponding to claim 7) is a computer which comprises a 
system section and an application software section, and which 
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takes in copyright claimed, encrypted data via a digital 
interface for processing therein, wherein 

said system section sends said data to said application 
section by embedding into said data information concerning 
application software residing in said application software 
section. 

The 8 th invention of the present invention 
(corresponding to claim 8) is a computer according to said 
7 th invention, wherein the information concerning said 
application software is information indicating the name of 
said application software, or the version number of said 
application software, or a tamper code, or the type of a tamper 
resistance verification function, or information concerning 
user. 

The 9 th invention of the present invention 
(corresponding to claim 9) is a medium holding thereon a 
program and/or data for enabling a computer to implement all 
or part of the functions of all or part of the means of the 
invention described in any one of said 1 st to 8 th inventions, 
wherein said medium is computer processable. 

The 10 th invention of the present invention 
(corresponding to claim 10) is a collection of information 
wherein said collection of information is a program and/or 
data for enabling a computer to implement all or part of the 
functions of all or part of the means of the invention described 
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in any one of said 1 st to 8 th inventions . 
BRIEF DESCRIPTION OF THE DRAWINGS 

Figure 1 is a block diagram showing a first embodiment 
of the present invention in which authentication is performed 
between a system section and an application software section 
and AV data is encrypted within a PC . 

Figure 2 is a diagram showing a second embodiment of 
the present invention in which illegal application software 
is detected using CRL. 

Figure 3 is a diagram showing a third embodiment of 
the present invention in which a tamper resistant system is 
incorporated. 

Figure 4 is a diagram showing a fourth embodiment of 
the present invention in which a plurality of tamper 
verification functions are incorporated. 

Figure 5 is a diagram showing a fifth embodiment of 
the present invention in which an electronic watermark is 
embedded into copyright claimed AV data. 

Figure 6 is a diagram showing a sixth embodiment of 
the present invention in which the copyright of copyright 
claimed AV data can be protected more securely. 

Figure 7 is a list showing the authentication 
success /fail status versus the type of license appended to 
application software according to the first embodiment of 
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the present invention. 

[DESCRIPTION OF THE REFERENCE NUMERALS] 

1. 1394 D-IF 

2. TRANSMISSION AUTHENTICATION MEANS 

3. APPLICATION AUTHENTICATION FUNCTION 

4. SIGNATURE MEMORY 

5. DATA PATH 

6. TRANSMISSION DECRYPTION MEANS 

7. INTRA-PC ENCRYPTION MEANS 

8. APPLICATION AUTHENTICATION MEANS 

9. SIGNATURE CREATING MEANS 

10. DATA USE (DECODE DISPLAY) MEANS 

11. DECRYPTION MEANS 

12. SYSTEM SECTION 

13. APPLICATION SOFTWARE SECTION 

14. CRL MEMORY 

15. APPLICATION CRL MEMORY 

16. CRL COMPARING MEANS 

17. TAMPER AUTHENTICATION FUNCTION 

18. 19. SOFT CHECK MEANS 

20. VERSION SELECTING MEANS 

21. TAMPER AUTHENTICATION FUNCTION 

22. SIGNATURE EMBEDDING MEANS 

23. ELECTRONIC WATERMARK EMBEDDING MEANS 



BEST MODE FOR CARRYING OUT THE INVENTION 

Embodiments of the present invention will be described 
below with reference to drawings. 
(Embodiment 1) 

A first embodiment will be described with reference 
to Figures 1 and 7. This embodiment deals with the case in 
which authentication is performed between a system section 
and an application software section and AV data input to a 
PC is transferred through the PC in encrypted form. In Figure 
1, the PC 24 comprises the system section 12 and the application 
software section 13. The system section 12 is D-IF hardware 
of the PC 24 or system software such as a driver or OS. The 
application software section 13 is a means for recording 
application software and executing the application software . 

The system section 12 comprises a 1394 D-IF 1, a 
transmission authentication means 2, an application 
authentication function 3, a signature memory 4, a 
transmission decryption means 6, and an intra-PC encryption 
means 7 . 

The 1394 D-IF 1 is an IEEE 1394 interface, a serial 
bus interface standard, for transferring data and commands 
to and from an external device such as an STB or D-VHS. The 
transmission authentication means 2 is a means which, when 
AV data claims copyright protection, performs authentication 
with an external device and, when the authentication is 
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completed successfully, passes a key for decrypting the AV 
data to the transmission decryption means 6 . The application 
authentication function is a means for performing 
authentication within the PC when the AV data input via the 
1394 D-IF 1 claims copyright protection. More specifically, 
it performs authentication with the application software 
section 13 by referencing the contents of the signature memory 
4 where the signature created by a signature creating means 
9 is recorded and, when the authentication is completed 
successfully, passes an encryption key to the intra-PC 
encryption means 7 and a decryption key to an application 
authentication means 8 . The signature memory 4 is a memory 
for recording the signature created by the signature creating 
means 9 . The transmission decryption means 6 is ameans which, 
when the authentication with the external device is completed 
successfully, receives the key from the transmission 
authentication means 2 and decrypts the AV data input via 
the 1394 D-IF 1. The intra-PC encryption means 7 is a means 
which, when the authentication with the application software 
section 13 is completed successfully, re-encrypts the AV data 
decrypted by the transmission decryption means 6 and passes 
the encrypted data to the application software section 13 . 

The application software section 13 comprises the 
application authentication means 8, the signature creating 
means 9, a data using (decoding and displaying) means 10, 



- 13 - 



and a decryption means 1 1 . 

The application authentication means 8 is a means for 
performing authentication with the application 
authentication function in the system section 12. The 
signature creating means 9 is a means for creating a digital . 
signature which is used when performing authentication with 
the system section 12. The data using (decoding and 
displaying) means 10 is ameans for enabling currently running 
application software to use the AV data . The decryption means 
11 is a means which, when the authentication with the system 
section 12 is completed successfully, receives a decryption 
key from the application authentication means 9 and decrypts , 
using the key, the AV data encrypted by the intra-PC encryption 
means 7 . 

Next, the operation of the present embodiment having 
the above configuration will be described. 

First, a method of describing copyright information 
will be described. 

When AV data is transferred from an external device 
such as an STB or VTR to the PC 24, that AV data may be one 
claiming copyright protection. That is, it may carry an 
appendage indicating that copying is prohibited or copying 
is permitted only once. Such signaling information 
indicating approval for use is implemented using the CGMS 
(Copy Generation information) embedded in a stream. 
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The CGMS is contained in a transport stream transmitted 
from a broadcasting station. The CGMS is 2-bit data; the 
values that the CGMS can take and their meanings are as follows . 

That is, CGMS = 11 means "copy never", CGMS = 10 means 
"copy one generation", and CGMS = 00 means "copy free" . CGMS 
= 01 does not exist. Here, "copy never" means that copying 
is prohibited and only playing back the AV data is permitted. 
"Copy one generation" means that copying is permitted only 
once and the copied AV data can Jae played back as many times 
as desired. "Copy free" means that the data can be copied 
freely. Detection of the CGMS requires the provision of a 
transport stream decoder circuit or the like and makes the 
hardware configuration complex. 

The need for hardware such as the transport stream 
decoder circuit can be eliminated if signaling information 
(hereinafter referred to as EMI for Encryption Mode Indicator ) 
for transmitting usage approval information is included in 
the IEEE 1394 packet data header. 

The EMI is generated from the CGMS, and takes the 
following values. That is, EMI = 11 means "copy never", EMI 
= 10 means "copy one generation", and EMI = 00 means "copy 
free". EMI =01 means "no more copy". Here, "copy never" 
means that copying is prohibited and only playing back the 
AV data is permitted. "Copy one generation" means that 
copying is permitted only once and the copied AV data can 
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be played back as many times as desired. "Copy free" means 
that the data can be copied freely. "No more copy" means 
that the data is AV data already copied in compliance with 
"copy one generation" , and therefore that no more copies are 
permitted . 

In IEEE 1394, such EMI is used to specify the method 
of encryption and the method of authentication . For example , 
no encryption is performed when transmitting AV data with 
EMI = 00 meaning "copy free". For data with EMI = 10 meaning 
"copy one generation" or EMI =01 meaning "no more copy", 
the key used for encryption and the method of device 
authentication are different from those used for data with 
EMI = 11 meaning "copy never". 

Suppose here that AV data is received from an STB . Then , 
it is determined, based on the CGMS or the EMI, whether the 
AV data received from the STB is data claiming copyright 
protection; if it is copyright claimed data, authentication 
is performed with the STB, the sender of the AV data. The 
AV data is transmitted in encrypted form and, when the 
authentication is completed successfully, the transmission 
authentication means 2 receives a key for decrypting the AV 
data from the STB. When EMI is 11, authentication is 
performed based on a public key, while when EMI is 10 or 01, 
authentication is performed based on a common key. 

When the authentication between the transmission 
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authentication means and the STB is completed successfully, 
authentication between the application software section 13 
and the system section 12 is performed next. In the 
application authentication means 8, the signature creating 
means 9 creates a digital signature for the currently running 
application software. The signature memory 4 records the 
digital signature created by the signature creating means 
8. The application authentication function 3 performs the 
authentication with the application authentication means 8 
by using the digital signature recorded in the signature 
memory 4. 

Here, a license corresponding to the usage approval 
information of the copyright claimed AV data is appended in 
advance to each application software. The authentication 
between the application software section 13 and the system 
section 12 is completed successfully only when the software 
has a legitimate license. More specifically, the license 
is classified according to the function of application 
software. That is, the license given to software that has 
the function of only displaying AV data is classified as 
license A, and the license given to software that has the 
function of recording AV data is classified as license B. 
Further, the license given to software that strictly observes 
the copy protection status is classified as license C. The 
license C is given to such software that, when AV data is 



copy prohibited data, only plays back the AV data and does 
not copy it, and that, when AV data is data permitting copying 
only once, copies the AV data only once . However, the license 
C requires that the contents of the copyright of copyright 
claimed AV data be reported to the application software 
together with the AV data ; this can be accomplished by building 
EMI or CGMS into the AV data. 

Suppose here that the license class of the currently 
running application software is B. Also suppose that the 
usage approval information for the AV data transmitted from 
the STB indicates EMI =11. That is, copying of the AV data 
is prohibited. In this case, authentication between the 
application authentication means 8 and the application 
authentication function 3 is performed, but the 
authentication fails. Next, suppose that the license class 
of the currently running application software is A. In this 
case, since the application software is one that performs 
only display, authentication between the application 
authentication means 8 and the application authentication 
function 3 will be completed successfully. 

Further, when copying of the AV data is prohibited, 
if the application software is one with the license C, the 
authentication will be completed successfully. Figure 7 
shows a list tabulating the relationships among the usage 
approval status of AV data, licence class of application 



software, and success/fail status of authentication. 

When the authentication between the application 
software section 13 and the system section 12 is completed 
successfully, the transmission decryption means 6 receives 
the decryption key from the transmission authentication means 
2 and decrypts the AV data received via the 1394 D-IF 1 . Next , 
the intra-PC encryption means 7 re-encrypts the AV data. 
Within the PC 24 , the copyright claimed AV data is transferred 
in encrypted form until it is presented for use by the 
application software. The decryption means 11 in the data 
using (decoding and displaying) means 10 receives the 
decryption key from the application authentication means 8 
and decrypts the AV data. The decrypted AV data is passed 
from the data using (decoding and displaying) means 10 to 
the currently running application software for processing. 

On the other hand, when the authentication between the 
application software section 13 and the system section 12 
failed, the AV data is once decrypted by the transmission 
decryption means 6 and then encrypted again by the intra-PC 
encryption means 7, and the encrypted data is transferred 
to the data using (decoding and displaying) means 10. Since 
the authentication failed, the application authentication 
means 8 cannot receive the decryption key from the application 
authentication function 3; as a result, the decryption key 
cannot be passed to the decryption means 11 which is therefore 
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unable to decrypt the AV data . In this way , if the application 
software does not have an appropriate license, it cannot 
decrypt the AV data for processing, since the authentication 
fails. 

In this way, copyright claimed AV data is encrypted 
within the PC 24, and authentication is performed between 
the system section 12 and the application software section 
13, to selectively identify application software that has 
the appropriate license; accordingly, if application 
software that does not have the appropriate license receives 
the AV data, since the data is encrypted, the application 
software cannot handle the AV data as valid data, and the 
copyright claimed AV data can thus be protected. 

The re-encryption according to the present invention 
may be performed using the same key as that used to encrypt 
the data for transmission or a different key from that used 
to encrypt the data for transmission. Further, the AV data 
received in encrypted form may be transferred within the PC 
in the encrypted form without once decrypting it. It will 
also be noted that the method of re-encryption is not limited 
to the particular method described above, but any other 
specific method may be used. 

Furthermore, in the present embodiment, the intra-PC 
encryption means has been described as transmitting the 
encrypted data to the data using (decoding and displaying) 
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means when the authentication between the system section and 
the application software section failed, but instead, invalid 
data such as a blueback screen may be transmitted to the data 
using (decoding and displaying) means when the authentication 
failed. By so doing, the copyright of the AV data can be 
protected more securely. 

The system section according to the present invention 
can be implemented using hardware constituting the 1394 D-IF 
or system software such as a driver or OS. That is, it may 
be implemented using hardware within the PC or using system 
software . 

Moreover, the license according to the present 
embodiment is not limited to the one classified into three 
classes A, B, andC, as described above. It may be classified 
into four classes or two classes, the only requirement being 
that it be classified according to the status of the copyright 
information of AV data. 

The present embodiment has been described by taking 
an STB as an example of the external device from which the 
PC receives copyright claimed AV data, but the invention is 
not limited to this particular example; that is, any other 
device, such as a DVC, DVHS, HDD, DVD-RAM, or broadcasting 
receiver may be used as the external device as long as it 
can transmit copyright claimed AV data. 

Further, the present embodiment has been described by 
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taking IEEE 1394 as an example, but the invention is not limited 
to this particular example, and any other network may be used 
as long as it has the function of transmitting copyright 
claimed AV data together with its copyright information. - 

It will also be noted that the AV data according to 
the present embodiment is not limited to video/audio data 
as described above, but should be interpreted to also include 
data such as copyright claimed programs or documents or any 
other data claiming copyright . 

The PC described in the present embodiment is an example 
of the computer of the present invention. 
(Embodiment 2) 

Next, a second embodiment will be described with 
reference to Figure 2. 

The description of this embodiment deals with the case 
in which before performing authentication between the system 
section and the application software section, application 
software is discriminated using a management criterion 
(hereinafter called the CRL) discriminating illegitimate or 
legitimate application software. 

The difference from the first embodiment is that the 
system section 12 includes a CRL memory 14, an application 
CRL memory 15, and a CRL comparing means 16. The following 
description is given focusing on the difference from the first 
embodiment . 
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The CRL memory 14 is a memory for storing the management 
criterion for discriminating an illegitimate or legitimate 
device. The application CRL memory 15 is a means for storing 
the management criterion for discriminating illegitimate or 
legitimate application software. The CRL comparing means 
16 is a means for judging based on the CRL whether application 
software is illegitimate or legitimate. 

Next, the operation of the present embodiment having 
the above configuration will be described. 

In this embodiment also, it is assumed that AV data 
is sent from an STB, and that the AV data is data claiming 
copyright protection. First, before performing 
authentication between the transmission decryption means 6 
and the STB, a judgement is made as to whether the PC 2 4 is 
a legitimate device or not by using the CRL stored in the 
CRL memory of the STB. If it is judged to be a legitimate 
device, the transmission authentication means 2 performs 
authentication with the STB. If it is judged to be an 
illegitimate device, the STB does not perform authentication 
and the key for decrypting the encrypted AV data is not passed 
to the PC 24. 

Suppose here that the PC 24 is judged to be a legitimate 
device by the STB. Then, the transmission authentication 
means 2 performs authentication with the STB via the 1394 
D-IF 1. When the authentication is completed successfully, 
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the STB passes the key for decrypting the AV data to the 
transmission authentication means 2 via the 1394 D-IF 1. 

Next, the signature creating means 9 creates a digital 
signature for the currently running application software, 
and the digital signature is stored in the signature memory 
4. The CRL comparing means 16 judges whether the currently 
running application software is illegitimate software or 
legitimate software by comparing the contents of the digital 
signature stored in the signature memory 4 with the contents 
of the application CRL memory 15. If it is illegitimate 
software, authentication between the application software 
section 13 and the system section 12 is not performed. On 
the other hand, if it is legitimate software, authentication 
between the application software section 13 and the system 
section 12 is performed next. It is assumed here that a 
license similar to that described in the first embodiment 
is appended to the application software. 

The application CRL memory 15 is a memory for the OS 
or driver residing in the PC 24; a separately created CRL 
may be prestored, or the CRL transferred from the IEEE 1394 
may be used. Generally, the CRL is not fixed, but can be 
updated according to the situation. For example, if a device 
or application altered to infringe copyright is distributed, 
the CRL can be updated so as to cause authentication to fail 
by identifying such a device or application. 
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When the authentication is completed successfully 
between the application software section 13 and the system 
section 12, the transmission decryption means 6 receives the 
decryption key from the transmission authentication means 
2 , and decrypts the AV data received via the 1394 D-IF. Next, 
the intra-PC encryption means 7 re-encrypts the AV data. 
Within the PC 24 , the copyright claimed AV data is transferred 
in encrypted form until it is presented for use by the 
application software. The decryption means 11 in the data 
using (decoding and displaying) means 10 receives the 
decryption key from the application authentication means 8 
and decrypts the AV data. The decrypted AV data is passed 
from the data using (decoding and displaying) means 10 to 
the currently running application software for processing. 

On the other hand, when the authentication between the 
application software section 13 and the system section 12 
failed, the AV data is once decrypted by the transmission 
decryption means 6 and then encrypted again by the intra-PC 
encryption means 7, and the encrypted data is transferred 
to the data using (decoding and displaying) means 10. Since 
the authentication failed, the application authentication 
means 8 cannot pass the decryption key to the decryption means 
11 which is therefore unable to decrypt the AV data. In this 
way, if the application software does not have an appropriate 
license, it cannot decrypt the AV data for processing, since 
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the authentication fails. 

Or, information on the version of a defeated and 
invalidated tamper resistant system is retrieved from the 
application CRL memory 15, and if the version of the 
application is that of the invalided tamper resistant system, 
then the key for decrypting the AV data is not passed to the 
application authentication function 3, nor is the 
authentication between the system section 12 and the 
application software section 13 performed. 

In this way, by judging whether the currently running 
application software is illegitimate or legitimate by using 
the CRL before performing authentication between the 
application software section and the system section, the 
application software can be rejected in advance if it has 
the potential of performing illegal operations on the 
copyright claimed AV data. 

The re-encryption according to the present invention 
may be performed using the same key as that used to encrypt 
the data for transmission or a different key from that used 
to encrypt the data for transmission. Further, the AV data 
received in encrypted form may be transferred within the PC 
in the encrypted form without once decrypting it. It will 
also be noted that the method of re-encryption is not limited 
to the particular method described above, but any other 
specific method may be used. 
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Furthermore, in the present embodiment, the intra-PC 
encryption means has been described as transmitting the 
encrypted data to the data using (decoding and displaying) 
means when the authentication between the system section and 
the application software section failed, but instead, invalid 
data such as a blueback screen may be transmitted to the data 
using (decoding and displaying) means when the authentication 
failed. By so doing, the copyright of the AV data can be 
protected more securely. 

The system section according to the present invention 
can be implemented using hardware constituting the 1394 D-IF 
or system software such as a driver or OS. That is, it may 
be implemented using hardware within the PC or using system 
software . 

The present embodiment has been described by taking 
an STB as an example of the external device from which the 
PC receives copyright claimed AV data, but the invention is 
not limited to this particular example; that is, any other 
device, such as a DVC, DVHS, HDD, DVD-RAM, or broadcasting 
receiver may be used as the external device as long as it 
can transmit copyright claimed AV data. 

Further, the present embodiment has been described by 
taking IEEE 139 4 as an example , but the invention is not limited 
to this particular example, and any other network may be used 
as long as it has the function of transmitting copyright 
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claimed AV data together with its copyright information. 

It will also be noted that the AV data according to 
the present embodiment is not limited to video/audio data 
as described above, but should be interpreted to also include 
data such as copyright claimed programs or documents or any 
other data claiming copyright. 

The PC described in the present embodiment is an example 
of the computer of the present invention. 
(Embodiment 3) 

Next, a third embodiment will be described with 
reference to Figure 3 . 

The description of this embodiment deals with the case 
in which using a tamper authentication function, a judgement 
is made as to whether application software is illegally 
altered or not. 

The difference from the first embodiment is that the 
system section 12 includes the tamper authentication function 
17 and the application software section 13 includes a soft 
check means 18. 

The tamper authentication function 17 is a means for 
verifying a tamper code generated from application software 
to determine whether or not the application software has been 
tampered with. The soft check means 18 is a means for checking 
the currently running application and generating the tamper 
code. 
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Next, the operation of the present embodiment having 
the above configuration will be described. 

Tamper resistant software that generates a tamper code , 
as described above, refers to software having resistance to 
internal analysis or alterations. That is, it refers to 
software that can protect against an offence from an 
ill-willed user attempting to illegally use copyright claimed 
AV data. Tamper resistant software generates a code called 
a tamper code. The soft check means 18 examines the program 
to verify the presence or absence of tampering, and also 
examines the execution environment to verify the presence 
or absence of interception along the data path, the presence 
of a third party monitoring the execution of the program, 
etc . The tamper code is data representing the result of this 
verification or an intermediate result. By verifying this 
tamper code, it can be determined whether or not the tamper 
resistant software has been tampered with. That is, in the 
present embodiment, the application software is equipped with 
a built-in tamper resistant system. 

Here, as in the first embodiment, suppose that 
authentication is performed between the STB and the 
transmission authentication means 2, and that the 
authentication is completed successfully. Then, the soft 
check means 18 checks the currently running application 
software and generates a tamper code. The generated tamper 
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code is passed to the application authentication means where 
the tamper code is written into the digital signature by the 
signature creating means 9; then, this digital signature is 
stored in the signature memory 4 . By referencing the digital 
signature stored in the signature memory 4, the tamper 
authentication function 17 retrieves the tamper code of the 
currently running application software and verifies it . The 
result of the verification as to whether the currently running 
application software is illegally altered or not, or whether 
data interception or the monitoring of the program execution 
is being performed or not, is reported to the application 
authentication function 3. For simplicity, the following 
description is given by assuming that the verification as 
to whether data interception or the monitoring of the program 
execution is being performed or not is included in the 
verification as to whether the application is illegally 
altered or not. If the application software is illegally 
altered, the application authentication function 3 does not 
pass the key for decrypting the AV data to the application 
authentication means 8, nor does it perform authentication 
between the system section 12 and the application software 
section 13. If the application software is not altered 
illegally, the application authentication function 3 and the 
application authentication means 8 perform authentication 
based on the digital signature recorded in the signature 
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memory 4. Here, as in the first embodiment, a license is 
appended to the application software. When the 
authentication is completed successfully, the application 
authentication function 3 passes the key for decrypting the 
AV data to the application authentication means 8. 

When the authentication is completed successfully 
between the application software section 13 and the system 
section 12, the transmission decryption means 6 receives the 
decryption key from the transmission authentication means 
2, and decrypts the AV data received via the 1394 D-IF 1. 
Next , the intra-PC encryption means 7 re-encrypts the AV data . 
Within the PC 24 , the copyright claimed AV data is transferred 
in encrypted form until it is presented for use by the 
application software. The decryption means 11 constituting 
the data using (decoding and displaying) means 10 receives 
the decryption key from the application authentication means 
8 and decrypts the AV data. The decrypted AV data is passed 
from the data using (decoding and displaying) means 10 to 
the currently running application software for processing. 

On the other hand, when the authentication between the 
application software section 13 and the system section 12 
failed, the AV data is once decrypted by the transmission 
decryption means 6 and then encrypted again by the intra-PC 
encryption means 7, and the encrypted data is transferred 
to the data using (decoding and displaying) means 10. Since 



the authentication failed, the application authentication 
means 8 cannot pass the decryption key to the decryption means 
11 which is therefore unable to decrypt the AV data. In this 
way f if the application software does not have an appropriate 
license, it cannot process the AV data, since the 
authentication fails. 

In this way, by incorporating a tamper resistant system 
into the application software and by adding a function for 
checking the application software for illegally tampering, 
the copyright of the AV data can be protected more securely. 

The re-encryption according to the present invention 
may be performed using the same key as that used to encrypt 
the data for transmission or a different key from that used 
to encrypt the data for transmission. Further, the AV data 
transferred in encrypted form may be transferred within the 
PC in the encrypted form without once decrypting it . It will 
also be noted that the method of re-encryption is not limited 
to the particular method described above, but any other 
specific method may be used. 

Furthermore, in the present embodiment, the intra-PC 
encryption means has been described as transmitting the 
encrypted data to the data using (decoding and displaying) 
means when the authentication between the system section and 
the application software section failed, but instead, the 
intra-PC encription means which transmits invalid data such 
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as a blueback screen to the data using (decoding and 
displaying) means when the authentication failed, may be used. 
By so doing, the copyright of the AV data can be protected 
more securely. 

The system section according to the present invention - 
can be implemented using hardware constituting the 1394 D-IF 
or system software such as a driver or OS. That is, it may 
be implemented using hardware within the PC or using system 
software. 

The present embodiment has been described by taking 
an STB as an example of the external device from which the 
PC receives copyright claimed AV data, but the invention is 
not limited to this particular example; that is, any other 
device, such as a DVC, DVHS, HDD, DVD-RAM, or broadcasting 
receiver may be used as the external device as long as it 
can transmit copyright claimed AV data. 

Further, the present embodiment has been described by 
taking IEEE 1394 as an example, but the invention is not limited 
to this particular example, and any other network may be used 
as long as it has the function of transmitting copyright 
claimed AV data together with its copyright information. 

It will also be noted that the AV data according to 
the present embodiment is not limited to video/audio data 
as described above, but should be interpreted to also include 
data such as copyright claimed programs or documents or any 
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other data claiming copyright. 

Furthermore, the tamper code and the tamper resistance 
verification function according to the present invention are 
not restricted to using the particular tamper resistant system, 
but can be implemented using any desired tamper resistant . 
system. 

The PC described in the present embodiment is an example 
of the computer of the present invention, and the tamper 
authentication function according to the present embodiment 
is an example of the tamper resistance verification function 
of the present invention. 
(Embodiment 4) 

Next, a fourth embodiment will be described with 
reference to Figure 4 . 

The description of this embodiment deals with the case 
in which using a tamper authentication function, a judgement 
is made as to whether application software is illegally 
altered or not. 

The difference from the third embodiment is that the 
system section 12 includes a plurality of tamper 
authentication functions 21 and a version selecting means 
20, and the soft check means 19 in the application software 
section 13 generates not only a tamper code but also type 
information indicating the type of the tamper resistant system 
built into the application software. 



The version selecting means 20 is a means for selecting 
the tamper authentication function corresponding to the type 
of the tamper resistant system, based on the digital signature 
recorded in the signature memory 4. 

Next, the operation of the present embodiment having - 
the above configuration will be described. 

It is assumed here that, as in the third embodiment, 
the application software is equipped with a built-in tamper 
resistant system. Suppose, as in the third embodiment, that 
authentication is performed between the STB and the 
transmission authentication means 2 , and that the 
authentication is completed successfully. Then, the soft 
check means 19 checks the currently running application 
software and generates a tamper code and type information 
indicating the type of the built-in tamper resistant system. 
The thus generated tamper code and type information are passed 
to the application authentication means 8 where the tamper 
code and type information are written into the digital 
signature by the signature creating means 9; then, this 
digital signature is stored in the signature memory 4. The 
version selecting means 20 selects the tamper authentication 
function to be used, by referencing the tamper resistant 
system type information stored in the signature memory 4 . 
Here, it is assumed that the version selecting means 20 
includes its own CRL memory for tamper versions, though not 
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shown here, and by utilizing this CRL memory, the version 
selecting means 20 operates so as not to select tamper 
resistance check means 19 for which the method of defeating 
it is already known. The selected tamper authentication' 
function 21, by referencing the digital signature stored in 
the signature memory 4, retrieves the tamper code of the 
currently running application software and verifies it. The 
result of the verification as to whether the currently running 
application software is illegally altered or not is reported 
to the application authentication function 3 . If the 
application software is illegally altered, the application 
authentication function 3 does not pass the key for decrypting 
the AV data to the application authentication means 8, nor 
does it perform authentication between the system section 
12 and the application software section 13. If the 
application software is not altered illegally, the 
application authentication function 3 and the application 
authentication means 8 perform authentication based on the 
digital signature recorded in the signature memory 4. Here, 
as in the first embodiment, a license is appended to the 
application software. When the authentication is completed 
successfully, the application authentication function 3 
passes the key for decrypting the AV data to the application 
authentication means 8. 

When the authentication is completed successfully 



between the application software section 13 and the system 
section 12, the transmission decryption means 6 receives the 
decryption key from the transmission authentication means 
2, and decrypts the AV data received via the 1394 D-IF 1. 
Next , the intra-PC encryption means 7 re-encrypts the AV data . 
Within the PC 24 , the copyright claimed AV data is transferred 
in encrypted form until it is presented for use by the 
application software. The decryption means 11 in the data 
using (decoding and displaying) means 10 receives the 
decryption key from the application authentication means 8 
and decrypts the AV data. The decrypted AV data is passed 
from the data using (decoding and displaying) means 10 to 
the currently running application software for processing. 

On the other hand, when the authentication between the 
application software section 13 and the system section 12 
failed, the AV data is once decrypted by the transmission 
decryption means 6 and then encrypted again by the intra-PC 
encryption means 7, and the encrypted data is transferred 
to the data using (decoding and displaying) means 10. Since 
the authentication failed, the application authentication 
means 8 cannot pass the decryption key to the decryption means 
11 which is therefore unable to decrypt the AV data. In this 
way, if the application software does not have an appropriate 
license, it cannot decrypt the AV data for processing, since 
the authentication fails . 



In this way, by not only incorporating a tamper 
resistant system into the application software but also 
providing a plurality of tamper resistant authentication 
functions in the system section, if the tamper resistant" 
system of the application software is defeated, the system 
section need only switch to another kind of tamper resistant 
authentication function, eliminating the need for updating 
the version of the OS, etc. , and the damage can thus be minimized 
if the tamper resistant system- is defeated. 

The re-encryption according to the present invention 
may be performed using the same key as that used to encrypt 
the data for transmission or a different key from that used 
to encrypt the data for transmission. Further, the AV data 
received in encrypted form may be transferred within the PC 
in the encrypted form without once decrypting it. It will 
also be noted that the method of re-encryption is not limited 
to the particular method described above, but any other 
specific method may be used. 

Furthermore, in the present embodiment, the intra- PC 
encryption means has been described as transmitting the 
encrypted data to the data using (decoding and displaying) 
means when the authentication between the system section and 
the application software section failed, but instead, invalid 
data such as a blueback screen may be transmitted to the data 
using (decoding and displaying) means when the authentication 
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failed. By so doing, the copyright of the AV data can be 
protected more securely. 

The system section according to the present invention 
can be implemented using hardware constituting the 1394 D-IF 
or system software such as a driver or OS. That is, it may 
be implemented using hardware within the PC or using system 
software . 

The present embodiment has been described by taking 
an STB as an example of the external device from which the 
PC receives copyright claimed AV data, but the invention is 
not limited to this particular example; that is, any other 
device, such as a DVC, DVHS, HDD, or DVD-RAM, may be used 
as the external device as long as it can transmit copyright 
claimed AV data. 

Further, the present embodiment has been described by 
taking IEEE 1394 as an example, but the invention is not limited 
to this particular example, and any other network may be used 
as long as it has the function of transmitting copyright 
claimed AV data together with its copyright information. 

It will also be noted that the AV data according to 
the present embodiment is not limited to video/audio data 
as described above, but should be interpreted to also include 
data such as copyright claimed programs or documents or any 
other data claiming copyright. 

Furthermore, the tamper code and the tamper resistance 
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verification function according to the present invention are 
not restricted to using the particular tamper resistant system 
described above, but can be implemented using any desired 
tamper resistant system. 

The PC described in the present embodiment is an example - 
of the computer of the present invention, and the tamper 
authentication function according to the present embodiment 
is an example of the tamper resistance verification function 
of the present invention. 
(Embodiment 5) 

Next, a fifth embodiment will be described with 
reference to Figure 5. 

The description of this embodiment deals with the case 
in which information concerning the application software used 
to process AV data is embedded in the AV data by means of 
electronic watermarking . 

The electronic watermarking here refers to a technique 
for inserting a signature or like data into AV data in a 
dif f icult-to-alter manner, regardless of whether the 
technique is based on analog data superimposition or on 
digital cryptography. 

The difference from the first and second embodiments 
is that the system section includes a signature embedding 
means 22 and an electronic watermark embedding means 23. 

The signature embedding means 22 refers to the contents 
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of the digital signature recorded in the signature memory 
4, and performs processing, such as selecting information 
necessary for the electronic watermark embedding means 23 
and preparing necessary format, preparatory to processing 
in the electronic watermark embedding means 23. The 
electronic watermark embedding means 23 embeds data by 
electronic watermarking in the format prepared by the 
signature embedding means 22. 

In the present embodiment, the transmission 
authentication means 2, the application authentication 
function 3, the signature memory 4, the application 
authentication means 8, the signature creating means 9, the 
transmission decryption means 6, the intra-PC encryption 
means 7, the data using (decoding and displaying) means 10, 
and the decryption means 11 are the same as the corresponding 
elements in the first embodiment. The CRL memory 14, the 
application CRL memory 15, and the CRL comparing means 16 
are the same as the corresponding elements in the second 
embodiment . 

Next, the operation of the present embodiment having 
the above configuration will be described. 

Suppose that authentication is performed between an 
external device, for example, an STB, and the transmission 
authentication means 2 and is completed successfully. Also 
suppose that authentication between the application 
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authentication means 8 and the application authentication 
function 3 is completed successfully. Then, the encrypted 
AV data input via the 1394 D-IF 1 is decrypted by the 
transmission decryption means 6. The signature embedding 
means 22 retrieves the digital signature containing 
application software information from the signature memory 
4, and selects the contents. The selected contents include 
the name of the application software, the version number of 
the application software, information concerning the user, 
and information concerning the AV data itself . The signature 
embedding means 22 applies preparatory processing, such as 
preparing the format , to these pieces of information and sends 
the processed information to the electronic watermark 
embedding means 23 . The electronic watermark embedding means 
23 produces an electronic watermark by incorporating these 
pieces of information into the decrypted AV data. The AV 
data with the thus produced electronic watermark incorporated 
therein is encrypted once again by the intra-PC encryption 
means 7 , and the encrypted AV data is passed to the data using 
(decoding and displaying) means 10. The decryption means 
11 decrypts the AV data, and the data using (decoding and 
displaying) means 10 passes it to the currently running 
application software. The application software that 
received the AV data performs processing such as display, 
recording, playback, etc. 
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Suppose here that the application software illegally 
recorded the electronically watermarked AV data and 
distributed it outside the PC 24. Also suppose that the CGMS 
or EMI contained in the illegally distributed AV data was 
altered by an illegitimate application. The AV data thus 
altered is now recordable even on a legitimate device , and 
is distributed to many devices. Ix a supervising 
organization checking illegal distribution of AV data obtains 
the AV data, the organization can retrieve the following 
information by referencing the electronic watermark embedded 
in the AV data. That is, from the information concerning 
the AV data, it is found that the AV data is copy prohibited 
data, etc., and from the information concerning the 
application software, the source application software used 
to illegally copy and distribute the AV data can be identified . 

In this way, according to the present invention, the 
source of the illegal distribution can be identified; besides , 
since the computer of the present invention is equipped with 
means for updating the CRL, the application responsible for 
the illegal distribution can be excluded from the use of AV 
data by updating the CRL based on the information concerning 
the source, thus providing specific means for preventing 
illegal use thereafter. By using the electronic watermark 
in this way, the source of the illegal copy can be identified, 
and thus the illegal application software can be easily 
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isolated. 

The electronic watermarking system is not limited to 
the one used in the present embodiment, but any other system 
may be used as long as it can correctly embed the 
above-mentioned information into AV data and can correctly _ 
extract the information from the AV data before or after 
decoding in the prescribed format. 

In this way, by embedding an electronic watermark into 
AV data, illegal application software can be easily isolated 
and rejected. 
( Embodiment 6 ) 

Next, a sixth embodiment will be described with 
reference to Figure 6. 

The PC of the present embodiment combines all the 
functions of the PCs described in the first to fifth 
embodiments . 

The transmission authentication means 2, the 
application authentication function 3, the signature memory 
4, the application authentication means 8, the signature 
creating means 9, the transmission decryption means 6, the 
intra- PC encryption means 7, the data using (decoding and 
displaying) means 10, and the decryption means 11 are the 
same as the corresponding elements described in the first 
embodiment. The CRL memory 14, the application CRL memory 
15, and the CRL comparing means 16 are the same as the 
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corresponding elements described in the second embodiment. 
The version selecting means 20 and the tamper authentication 
means 21 are the same as the corresponding elements described 
in the fourth embodiment. The signature embedding means 22 
and the electronic watermark embedding means 23 are the same 
as the corresponding elements described in the fifth 
embodiment . 

The above configuration incorporates all the functions 
described in the first to fifth embodiments , and is therefore 
equipped with means for checking software reliability based 
on a tamper resistant system, a reliable detection method 
for detecting illegal use based on electronic watermarking, 
and means for preventing recurrence of illegal use once it 
is detected; accordingly, illegal use of copyright claimed 
AV data can be prevented in a reliable manner and, by 
introducing the concept of version into the tamper resistant 
system, collateral damage resulting from illegal use can be 
minimized. 

The invention may also be embodied in the form of a 
program recording medium having a program and/ or data recorded 
thereon for enabling a computer to implement all or part of 
the functions of all or part of the invention described in 
any one of the above-described embodiments, wherein the 
program and/or data is computer readable and 
the program and/ or data read by the computer is used to carry 



- 45 - 



out the above functions in collaboration with the computer . 

The term "data" here includes data structure, data 
format, and data type. 

The term "medium" refers to a recording medium such 
as a ROM, a transmission medium such as the Internet, or a 
transmission medium such as light, electric waves , soundwaves, 
etc. 

The term "medium holding thereon" means, for example, 
a recording medium having a program and/or data recorded 
thereon , or a transmission medium or the like for transmitting 
the program and/or data. 

The term "computer proces sable" means that in the case 
of a recording medium such as a ROM, for example, the medium 
is readable by a computer, and in the case of a transmission 
medium, the program and/or data to be transmitted can be 
processed by a computer as the result of the transmission. 

Further, the term "collection of information" includes, 
for example, software such as a program and/or data. 

POTENTIAL FOR EXPLOITATION IN INDUSTRY 

As is apparent from the above description, the present 
invention can provide a computer and a program recording 
medium which ensure that application software protects 
copyright for copyright claimed data, and which can address 
illegal alterations of the application software, identify 
and reject illegal application software, and prevent illegal 
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distribution without involving extra cost. 
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What is claimed is: 

1. A computer which comprises a system section and an 
application software section, and which takes in copyright 
claimed, encrypted data via a digital interface for processing 
therein , wherein 

said system section judges that said application 
software section is legitimate application software for the 
protection of copyright, and 

if said application software is a legitimate one, said 
system section passes a key for said encrypted data to said 
application software section. 

2. A computer as set fourth in claim 1, wherein said 
judgement in said system section is made by performing 
authentication between said system section and said 
application software section. 

3. A computer as set fourth in claim 1, wherein said 
judgement in said system section is made by using a CRL 
(Certification Revocation List) listing illegitimate or 
legitimate application software. 

4 . A computer as set fourth in any one of claims 1 to 
3, wherein said system section obtains said encrypted key 
as the result of authentication with an external device, 
decrypts said encrypted data, and re-encrypts said decrypted 
data by using said key or another key. 

5. A computer as set fourth in any one of claims 1 to 



- 48 - 



4 , wherein said system section includes a tamper verification 
function, and a tamper code is embedded into said application 
software in said application software section, and wherein 
said system section reads said tamper code from said 
application software section and, using said tamper 
verification function, verifies whether or not said 
application software has been tampered with, and if it is 
found that said application software has been tampered with, 
said system section reports the result of said verification. 

6 . A computer which comprises a system section and an 
application software section, and which takes in copyright 
claimed, encrypted data via a digital interface for processing 
therein, wherein 

said system section includes a plurality of tamper 
verification functions, and a tamper code associated with 
a designated type of tamper verification function and type 
information indicating said type are embedded into said 
application software in said application software section, 
and wherein said system section reads said tamper code and 
its associated type information from said application 
software section and, using the tamper verification function 
corresponding to said type, verifies whether or not said 
application software has been tampered with, and if it is 
found that said application software has been tampered with, 
said system section reports the result of said verification. 
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7 . A computer which comprises a system section and an 
application software section, and which takes in copyright 
claimed, encrypted data via a digital interface for processing 
therein , wherein 

said system section sends said data to said application 
section by embedding into said data information concerning 
application software residing in said application software 
section. 

8. A computer as set fourth in claim 7, wherein the 
information concerning said application software is 
information indicating the name of said application software, 
or the version number of said application software, or a tamper 
code, or the type of a tamper resistance verification function, 
or information concerning user. 

9 . A medium holding thereon a program and/or data for 
enabling a computer to implement all or part of the functions 
of all or part of the means of the invention described in 
any one of the claims 1 to 8, wherein said medium is computer 
proces sable. 

10. A collection of information wherein said collection 
of information is a program and/or data for enabling a computer 
to implement all or part of the functions of all or part of 
the means of the invention described in any one of the claims 
1 to 8. 
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ABSTRACT OF THE DISCLOSURE 

The problem to be solved is that once copyright claimed 
AV data is passed to application software, the application 
software can freely process the AV data for recording, etc. , 
defeating the purpose of copyright protection . The invention 
provides a computer which comprises a system section 12 and 
an application software section 13, and which takes in 
copyright claimed, encrypted data via a digital interface 
1 for processing therein, wherein the system section 12 judges 
that the application software section 13 is legitimate 
application software for the protection of copyright, and 
if the application software is a legitimate one, the system 
section 12 passes a key for the encrypted data to the 
application software section 13. 
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Declaration and Power of Attorney For Patent Application 
English Language Declaration 

As a below named inventor, Thereby declare that: 

My residence, post office address and citizenship are as stated below next to my name, 

I believe I am the original, first and sole inventor (if only one name is listed below) or an original, 
first and joint inventor (if plural names are listed below) of the subject matter which is claimed 
and for which a patent is sought on the invention entitled computer and program 

RECORDING MEDIUM 



the specification of which is attached hereto unless the following box is checked: 

£3 w as filed on 21 February 2000 as 

United States Application Number or PCT International Application Number PCT/J P OO/00956 
and was amended on Octo ber 18, 2000 by Preliminary Amendment. 

I hereby state that I have reviewed and understand the contents of the above identified 

specification, including the claims, as amended by any amendment referred to above. 

1 acknowledge the duty to disclose information which is material to patentability as defined in 37 
CFR § 1.56. 

I hereby claim foreign priority, benefits under 35 U.S.C. §119(a)-(d) or § 365(b) of any foreign 
application(s) for patent or inventor's certificate, or § 365(a) of any PCT International application 
which designated at least one country other than the United States, listed below and have also 
identified below by checking the box, any foreign application for patent or inventor's certificate, 
or PCT International application having a filing date before that of the application on which priority 
is claimed: 

Prior Foreign Application(s) Priority Not Claimed 

H1 1 ; 0 43,870 JAPAN Februa ry 22, 1999 

(Number) (Country) (Day/Month/Year Filed) | | 



(Day/Month/Year Filed) 



I hereby claim the benefit under 35 U.S.C. § 1 19(e) of any United States provisional application(s) 
listed below. 

(Application Number) (Filing Date) 

(Application Number) (Filing Date) 

I hereby claim the benefit under 35 U.S.C. § 120 of any United States application(s), or 365(c) of 
any PCT International application designating the United States, listed below and, insofar as the 
subject matter of each of the claims of this application is not disclosed in the prior United States 
or PCT International application in the manner provided by the first paragraph of 35 U.S.C. § 1 12, 
I acknowledge the duty to disclose information which is material to patentability as defined in 37 
CFR § 1 .56 which became available between the filing date of the prior application and the 
national or PCT internationai filing date of this application: 
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It 



(Application Number) 



(Application Number) 



(Filing Date) 



(Filing Date) 



(Status - patented, pending, abandoned) 



(Status - patented, pending, abandoned) 



POWER OF ATTORNEY: As a named inventor, I hereby appoint the following attorney(s) and/or 
agent(s) to prosecute this application and transact all business in the Patent and Trademark Office 
connected therewith: 



Paul F. Prestia 
Allan Ratner 
Andrew L. Ney 
Kenneth N. Nigon 
Kevin R. Casey 
Benjamin E. Leace 
James C. Simmons 



Reg-No^gai 
Reg.No. 19J3X 
Reg-NoJOJOQ 
Reg.NaJSIjSjg, 
Reg.Na32.llZ 
Reg.No.JS^- 
Reg.Na24J42. 



Lawrence E. Ashery 
Robert L. Anderson 
Christopher R. Lewis 
Louis W. Beardell, Jr. 
Racco L. Adomato 
Jacques L. Etkowicz 
Eric A. Dichter 



Reg.Na34£*5 
Reg.NoJSJSJ. 
Reg.No/^201 
Reg.No^JciS, 
Reg.NoTfO^ 
Reg-Najll^ 
Reg.No. 41,708 



Mark J. Marcelli Reg.Na36^3, 
Christopher J. Dervishian Reg.Najg^gfJ, 



Address all correspondence to: 

Ratner & Prestia. Suite_3&1 . OneW estlakes, Be r^n.^.0^joj(9^VajjevTorQe. .PA 19482-0980 
Address all telephone calls to: at (61 0) 407-0700. 

[ hereby declare that all statements made herein of my own knowledge are true and that all 
statements made on information and belief are believed to be true; and further that these 
statements were made with the knowledge that willful false statements and the like so 
made are punishable by fine or imprisonment, or both, under Section 1001 of Title 18 of the 
United States Code and that such willful false statements may jeopardize the validity of the 
application or any patent issued thereon. n {\ 



II name of sole or first inventor (given name, family name) Hideaki 1AKECHI 



October 25, 2000 



Inventor's signature _ 

Residence XP-Xeflaka-sKi, Osaka JAPAN T 
Citizenship JAPA N 

Post Office Address 6-17-407, Kamishinden-3chome, Toyonaka-shi, Osaka 533-0004 JAPAN 



T 



illy name) 



. October 25, 2000 



Fuil name of second joint inventor, if any (given name, famityname) Masa zumi YAMADA 

Second Inventor's signature .■ //Ujfr ?c-v^l y/ /Pw-tJjt 
Residence Mori guchi-shi, Q sa ka JAPA$ (^p\ 
Citizenship JAPA N 

Post Office Address 6-24 -10, Kinda-cho, Moriguchi-shi, Osaka 570-0011 JAPAN 



Additional inventors are being named on separately numbered sheets attached hereto. 



Form PTO/SB/01 (6-95)[R&P] 



Patent and Trademark Office-U.S. DEPARTMENT OF COMMERCE 



Full name of third joint inventor, if any (given name, family name) Hiro yuki HTSUKA 

October 25, 2000 



inventor's signature ^ 

ience Katano^hi^ Osaka JAPAN^T^/ 

umzenship JAPA N 

Post Office Address 6-25 -6, Kisaichi, Katano-shi, Osaka 576-0033 JAPAN 

Full name of fourth joint inventor, if any (given name, family naZe) ^akuya NISHIMURA 

f / - October 25, 2000 
Fourth inventor's signature ^J/z^pMH^ / ^ i$p\Avu^2Q\ Date 

Residence Osaka- aho, Osaka JAPAN f X 

Citizenship JAPA N ' 

Post Office Address 3-9 -18-F, Matsuzaki-cho, Abeno-ku, Osaka-shi, Osaka 545-0053 

JAPAN 

Full name of fifth joint inventor, if any (given name, family name) Yosh iki ^KUNO 

Fifth inventor's sionature Yo A i U\ k ^ & Date October 25, 200 0 

Residence jloriguchi-slii, Osaka JAPAN X 
Citizenship JAPA N ' 

Post Office Address 14-2 6-204, Oeda-nishimachi, Morigtichi-shi, Osaka 570-0054 JAPAN 
Full name of sixth joint inventor, if any (given name, family name) Shoi chi G0T0JI_ 

Sixth inventor's signature jjjjvi' J Date October 25, 200 0 

Residence 

Ikax akizsllL Osaka JAPAN <- ^/JV 
Citizenship JAPAN r /\ 

Post Office Address 6~45~7 10, Unobe-2chome, Ibaraki-shi, Osaka 567-0042 JAPAN 



Full name of seventh joint inventor, if any (given name, family name) 



Seventh inventor's signature Date 

Residence 
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Post Office Address 
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